From 2439f6928220c1bf08a4372f5c3c351b63b2bd1b Mon Sep 17 00:00:00 2001
From: Charlie <charlie11cohen@gmail.com>
Date: Tue, 5 May 2026 00:51:50 +0100
Subject: [PATCH] Probe of user mode supplied buffer was set to QueryDirectory
 length. Likely 0! Would have been a useless probe or at worst caused random
 oob SEH raises.

---
 Read.c | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/Read.c b/Read.c
index dd1bebb..facae1b 100644
--- a/Read.c
+++ b/Read.c
@@ -156,7 +156,7 @@ NTSTATUS BlorgVolumeRead(PIRP Irp, PIO_STACK_LOCATION IrpSp)
         {
             if (!Irp->MdlAddress && UserMode == Irp->RequestorMode)
             {
-                ProbeForRead(Irp->UserBuffer, IrpSp->Parameters.QueryDirectory.Length, sizeof(UCHAR));
+                ProbeForRead(Irp->UserBuffer, IrpSp->Parameters.Read.Length, sizeof(UCHAR));
             }
             
             RtlCopyMemory(systemBuffer, fileBuffer.BodyBuffer, realLength);